Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9eab6c034c5801c234ad0aa33589a39a.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_9eab6c034c5801c234ad0aa33589a39a
-
Size
150KB
-
MD5
9eab6c034c5801c234ad0aa33589a39a
-
SHA1
cadf7723fe9642812cb36954a400dff5d0b7dc26
-
SHA256
17973cd68dd3547132aa2bcd54f56e6df30a8aaa634321f5fd9d74d2c1d407ae
-
SHA512
41e0752b7d20c5e85f8a585f2488fb379d0fea4b5f517720d7c9deb42e3ac950669de3d40d7759111385c4dd1e835f2d2addf351b3caf6ae97777a76b53c9226
-
SSDEEP
3072:0XxTKbyR+nsPW/tagKwh4HA4q1SYBzvykvk3HL6P3W8RH:SxTKbnsPWIIh4gmszzSLzEH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9eab6c034c5801c234ad0aa33589a39a
Files
-
JaffaCakes118_9eab6c034c5801c234ad0aa33589a39a.exe windows:4 windows x86 arch:x86
7503574f0131714818572f065b46be11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
ReadConsoleA
CreateMutexW
GetFileAttributesA
GetPriorityClass
CreateHardLinkA
MapViewOfFile
SetEvent
DeleteFileW
GetLocalTime
LoadLibraryA
HeapSize
GetFileSize
CreateDirectoryW
GetStdHandle
Sleep
GetStartupInfoA
CreateFileA
VirtualProtect
GetProcessHeap
CreateSemaphoreA
GetTickCount
SetLastError
OpenSemaphoreA
SetLastError
dsprop
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
serialui
drvSetDefaultCommConfigW
drvSetDefaultCommConfigA
drvGetDefaultCommConfigW
drvGetDefaultCommConfigA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE